← Back to search

CVE-2026-95350

9.6 CRITICAL

Published 2026-09-29 · Updated 2026-09-30

AI risk analysis

Summary
This flaw involves a buffer overflow in ANGLE in Google Chrome on Android, allowing remote attackers to execute arbitrary code outside the sandbox via a crafted HTML page. This is a critical vulnerability that can lead to full system compromise.
Exploitability
Exploitation is relatively straightforward given the preconditions of a crafted HTML page and a vulnerable version of Google Chrome on Android prior to 154.0.8037.57.
Blast radius
If exploited, this vulnerability could result in full system compromise, enabling attackers to execute arbitrary code and potentially gain control over the device.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to Google Chrome version 154.0.8037.57 or later.
rcewebandroidcriticalbuffer-overflow

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weaknesses

CWE-122

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.